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DETAILED ACTION 

1. Claims 1-33 have been examined and are pending. 

Response to Arguments 

Applicants arguments filed 03/13/2006 have been considered but are moot in view of the 
new ground(s) of rejection. 

Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

2. Claims 1-5, 9, 20-21 and 25 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over prior art of record JP Pub No. 2001-016655 and US patent 6,504,480 to Magnuson et al. 
(hereinafter "Magnuson"), and further in view of US patent 7,047,426 to Andrews et al. 
(Hereinafter "Andrews") 

Claims 1-5, 9, 20-21 and 25 rejected under 35 U.S.C. 102(a) as being anticipated by JP 
Pub No. 2001-016655. 

As per claim 1, JP Pub No. 2001-016655 discloses a method of protecting data within a 
portable electronic device (Abstract), the method comprising the step of: 

select a predetermined number of attempts for a valid password entry; determining 
whether a received password is valid upon detecting an attempt to unlock the device (paragraph 
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0024 discloses that the PDA is performing the activity with a password (i.e. requiring a password 
to access the data) and a control means detecting invalid password); 

determining whether a number of attempts to enter the password exceeds the selected 
predetermined number of attempts for a valid password entry; and (page 1 of 4, discloses that 
the detection means detects that the count of failure of a password exceeded constant value (a 
predetermined number of attempts is inherent in the disclosed "constant value")). 

erasing data stored on the device if the number of attempts exceed the predetermined 
number of attempts for a valid password entry (page 1 of 4, MEANS, where a detection means 
detects that the count of failure of a password exceeds constant value outputs a detecting signal, 
and a control means . . .eliminates (i.e. erases) confidential information). 

JP Pub No. 2001-016655 does not explicitly disclose erasing all applications (as 
persuasively argued) and data stored on the device if the number of attempts exceeds the 
predetermined number of attempts for a valid password entry. 

However, in an analogous art, Magnuson discloses an electronic proximal security 
system comprising a master device and at least one slave device (Abstract, Fig. 1 and associated 
text, col. 6, lines 4-25), wherein if a non-owner attempts to access a slave device without 
appropriate control signals from the master device, the slave device runs a security application 
that erases or re-formats hard drive of the slave device (i.e. erasing all applications and data 
stored on the device). 

Therefore, it would have been obvious to one of ordinary skill in the art to incorporate the 
security application as taught by Magnuson into the portable device disclosed by JP Pub No. 
2001-016655 to erase all applications and data stored on the portable device if the device has 
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been stolen and a thief (an unauthorized user) attempts to access the device without an 
appropriate device /control codes to prevent corporate espionage (col. 6, lines 4-25). 

JP Pub No. 2001-016655 does not explicitly disclose a user accessing a graphical user 
interface (GUI) operating on the device to select a predetermined number of attempts for a valid 
password entry. 

However, in an analogous art, Andrews discloses a method of communication between a 
portable computing device (see Fig, 4 and associated text) and a host computer, wherein the 
portable computing device is configured to display a graphical user interface (GUI) on a display 
through which the user may interact with portable computing device including a screen-blocking 
program configured to display an information window containing a message that the device has 
been locked, and a password window requiring a user to enter a password before gaining access 
to the contents of portable computing device ( col. 6, lines 1-27). 

It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to modify the portable device disclosed by JP Pub No. 2001-016655 to incorporate the 
GUI taught by Andrews to facilitate the interactions between the device and the user of the 
device. 

As per claim 2, JP Pub No. 2001-016655 discloses the method according to claim 1 
further comprising the steps of: 

requiring entry of a password to access the data within the portable electronic device; 

determining whether the entered password is the valid password; and 

allowing access to the data if the valid password is entered (paragraph 0024 discloses that 
the PDA is performing the activity with a password (i.e. requiring a password to access the data) 
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and a control means detecting invalid password (i.e. detecting exhaustive search attack of 
password). 

As per claims 3-4, JP Pub No. 2001-016655 discloses protecting the data within tie 
portable electronic device, where in the step of protecting further comprises encrypting selected 
data (Abstract, paragraph 0025). 

As per claims 5 and 25, JP Pub No. 2001-016655 discloses the method according to 
claim 4 further comprising decrypting only a portion of the encrypted selected data being 
accessed after entry of a valid password (see claim 4, where the personal digital assistant 
equipment obtains private key to decode the encoded confidential information (i.e. decrypting a 
portion of the encrypted selected data)). 

As per claim 9, JP Pub No. 2001-016655 discloses the method according to claim 1 
wherein the predetermined number is a user defined (Claim 1, where count of failure of a 
password exceeded constant value, i.e. user defined number of failed password is inherent). 

As per claim 20, JP Pub No. 2001-016655disclose the method according to claim 1 
wherein the portable electronic device is a personal digital assistant. 

3. Claims 21 is rejected under 35 U.S.C 103(a) as being unpatentable over prior art of 
record JP Pub No. 2001-016655 and US patent 7,047,426 to Andrews et al. (Hereinafter 
"Andrews") and further in view of US patent 6,504,480 to Magnuson et al. (hereinafter 
"Magnuson"). 

As per claim 21, JP Pub No. 2001-016655 a method of protecting data within a portable 
electronic device to prevent access the data when in a locked mode, the method comprising the 
steps of: 
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encrypting selected data whenever the device is operating in a locked mode (paragraph 
004, see also Abstract, paragraph 0025); 

select a predetermined number of attempts for a valid password entry (paragraph 0024 
discloses that the PDA is performing the activity with a password (i.e. requiring a password to 
access the data) and a control means detecting invalid password); 

determining whether a number of attempts to enter the password exceeds the selected 
predetermined number of attempts for a valid password entry; and (page 1 of 4, discloses that 
the detection means detects that the count of failure of a password exceeded constant value (a 
predetermined number of attempts is inherent in the disclosed "constant value"))- 

erasing data stored on the device if the number of attempts exceed the predetermined 
number of attempts for a valid password entry (page 1 of 4, MEANS, where a detection means 
detects that the count of failure of a password exceeds constant value outputs a detecting signal, 
and a control means . . .eliminates (i.e. erases) confidential information). 

JP Pub No. 2001-016655 does not explicitly disclose determining whether a received 
password is valid upon detecting an attempt to exit the locked mode; 

However, in an analogous s art, Andrews discloses determining whether a received 
password is valid upon detecting an attempt to exit the locked mode (Andrews, col. 11, lines 29- 
41). Therefore, it would been obvious to one of ordinary skill in the art at the time the invention 
was made to incorporate the teachings of Andrews within the method and system disclosed by JP 
Pub No. 2001-016655 to determine whether a received password is valid upon detecting an 
attempt to exit the locked mode in order to determine whether an authorized user is using the 
device, when the status of the device is unauthorized use (Andrews, col. 11, lines 39-41). 
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JP Pub No. 2001-016655 does not explicitly disclose erasing all applications (as 
persuasively argued) and data stored on the device if the number of attempts exceed the 
predetermined number of attempts for a valid password entry. 

However, in an analogous art, Magnuson discloses an electronic proximal security 
system comprising a master device and at least one slave device (Abstract, Fig. 1 and associated 
text, col. 6, lines 4-25), wherein if a non-owner attempts to access a slave device without 
appropriate control signals from the master device, the slave device runs a security application 
that erases or re-formats hard drive of the slave device (i.e. erasing all applications and data 
stored on the device). 

Therefore, it would have been obvious to one of ordinary skill in the art to incorporate the 
security application as taught by Magnuson into the portable device disclosed by JP Pub No. 
2001-016655 to erase all applications and data stored on the portable device if the device has 
been stolen and a thief (an unauthorized user) attempts to access the device without an 
appropriate device /control codes to prevent corporate espionage (col. 6, lines 4-25). 

JP Pub No. 2001-016655 does not explicitly disclose a user accessing a graphical user 

interface (GUI) operating on the device to encrypt selected data and to select a predetermined 

number of attempts for a valid password entry. 

However, Andrews discloses a method of communication between a portable computing 
device (see Fig, 4 and associated text) and a host computer, wherein the portable computing 
device is configured to display a graphical user interface (GUI) on a display through which the 
user may interact with portable computing device including a screen-blocking program 
configured to display an information window containing a message that the device has been 
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locked, and a password window requiring a user to enter a password before gaining access to the 
contents of portable computing device ( col. 6, lines 1-27). 

It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to modify the portable device disclosed by JP Pub No. 2001-016655 to incorporate the 
GUI taught by Andrews to facilitate the interactions between the device and the user of the 
device. 

4. Claims 6-8 are rejected under 35 U.S.C. 103(a) as being unpatentable over prior art of 
record JP Pub No. 2001-016655, US patent 6,504,480 to Magnuson et al. (hereinafter 
"Magnuson"), US patent 7,047,426 to Andrews et al. (Hereinafter "Andrews") as applied to 
claims 1 and 4 above, and further in view of US Patent 4, 634,807 to Chorley et al. (hereinafter 
"Chorley"). 

JP Pub No. 2001-016655 as modified does not disclose but Chorley discloses a tamper- 
resistant software protection device (SPD) including a plurality of detectors detecting particular 
attack where SPD erase information by overwriting with random number (i.e. erasing comprises 
bit-wiping at least some of the data, wherein overwriting the data is performed plurality of 
times). 

It would have been obvious to one ordinary skilled in the art at the time the invention was 
made to employ Chorley' s SPD in the PDA disclosed by JP Pub No. 2001-016655 to deter 
various layers of attacks including curious and determined intruder (Chorley, col. 6, lines 26-35). 

5. Claims 10-12 are rejected under 35 U.S.C. 103(a) as being unpatentable over JP Pub No. 
2001-016655, Magnuson, Andrews as applied to claim 1 above, and further in view of US Patent 
6,501,380 to Jakobsson. 
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As per claims 10-11, JP Pub No. 2001-016655 as modified does not disclose but 
Jakobsson disclose (col. 1, lines 31-49) erasing the data after predetermined time period from the 
last syncing of the portable electronic device with another electronic device, wherein the 
predetermined time period is user defined (Abstract, col. 2, lines 43-62, col. 3, line 57 through 
col. 4, line 12, lines 47-54, col. 6, lines 53-53). 

It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to modify the PDA disclosed in JP Pub No. 2001-016655 with the theft deterrence 
mechanism of Jakobsson for erasing the data after predetermined time period from the last 
syncing of the portable electronic device with another electronic device to lower the anticipated 
value of a stolen portable device without lowering the value to its rightful owner (Jakobsson, col. 
1, lines 10-19) 

As per claim 12, JP Pub No. 2001-016655 as modified does not disclose but Jakobsson 
discloses locking the portable electronic device and requiring entry of the valid password after a 
predetermined period of non-operation of a powered on portable electronic device (col. 29-40). 

It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to modify the PDA disclosed in JP Pub No. 2001-016655 with the theft deterrence 
mechanism of Jakobsson of locking the portable electronic device and requiring entry of the 
valid password after a predetermined period of non-operation of a powered on portable 
electronic device to provide a theft deterrence mechanism for the portable electronic device 
(Jakobsson, col. 1, lines 10-19). 

6. As per claims 13 and 24, JP Pub No. 2001-016655 discloses the method according to 
claim 12 wherein the step of locking is performed only after an additional user defined time 
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period after the period of non-operation (paragraph 0029 discloses that the encrypted confidential 
information is replaced with dummy confidential information when the count of failure of the 
time of detection of a tamper exceeds a constant value). 

7, Claims 14 and 23 are rejected under 35 U.S.C. 103(a) as being unpatentable over JP Pub 
No. 2001-016655, Magnuson, Andrews as applied to claim 2 above, and further in view of US 
Patent 5,574,786 to Dayan et al. (hereinafter Dayan). 

As per claims 14 and 23, JP Pub No. 2001-016655 as modified does not disclose but 
Dayan teaches locking the portable electronic device and requiring entry of the valid password 
after powering off the portable electronic device (col. 4, lines 39-50, Dayan discloses a personal 
computer system which includes the optional capability to detect movement of the system from 
its normally aligned operating position. Upon such detection of movement, the movement 
detecting apparatus preferably activates a tamper evident mechanism whereby the system can 
only be activated after a power-off by a system owner, authorized user, or normal user properly 
entering the POP and/or the PAP in response to a PROMPT for a password during a power-up 
routine). 

It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to modify the system of JP Pub No. 2001-016655 to incorporate the teaching of Dayan 
for requiring entry of the valid password after powering off the portable electronic device 
disclosed by JP Pub No. 2001-016655 to render the portable device inoperable to any 
unauthorized user who doe not have the knowledge of the system passwords (Dayan, col. 4, lines 
31-37). 
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8. Claims 15 and 22 are rejected under 35 U.S.C. 103(a) as being unpatentable over JP Pub 
No. 2001-016655, Magnuson, Andrews as applied to claim 2 above, and further in view of US 
Patent 5,355,414 to Hale et al. (hereinafter Hale). 

As per claims 15 and 22, JP Pub No. 2001-016655 does not expressly disclose but hale 
discloses the method according to claim 2 further comprising disabling data transfer means of the 
portable electronic device until the valid password is entered (col. 2, lines 22-28). 
It would have been obvious to one of ordinary skill in the art to modify the system of JP Pub No. 
2001-016655 with the teachings of hale to disable data transfer means of the portable electronic 
device until the valid password is entered with the motivation to provide a safeguard against 
unauthorized access to the operating of the portable device (Hale, col. 1, lines 63-67). 

9. Claims 16-17 are rejected under 35 U.S.C. 103(a) as being unpatentable over JP Pub No. 
2001-016655, Magnuson, Andrews as applied to claim 2 above, and further in view of US Patent 
6,370,250 to Stein. 

As per claims 16 and 17, JP Pub No. 2001-016655 as modified does not disclose but 
Stein discloses protecting the valid password, wherein protecting the valid password is provided 
using an MD5 hash (col. 3, lines 52-67). It would have been obvious to one of ordinary skill in 
the art to employ the password protected method of Stein using MD5 to help strengthen the user 
authentication against attacks (Stein, col. 3 line 67 through col. 4, line 1). 

10. Claims 18-19 Claims 15 and 22 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over JP Pub No. 2001-016655, Magnuson, Andrews as applied to claim 2 above, 
and further in view of JP Publication 08-251660 
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As per claim 18, JP Pub No. 2001-016655 as modified does not disclose but JP 
Publication 08-251660 discloses the step of requiring entry of a password is performed to restrict 
access to selected applications within the portable electronic device (ABSTRACT). 

It would have been obvious to one of ordinary skill in the art to modify the method of JP 
Pub No. 2001-016655 with the teaching of JP Publication 08-251660 with a motivation to 
prevent that a theft and the lost wireless personal digital assistant are used improperly and to be 
able to change the PDA into a lock condition (JP Publication 08-251660, paragraphs 007-008) 

As per claim 19, JP Publication 08-251660 teaches the method according to claim 2 
further comprising displaying a lockout screen having the appearance of a normal start-up screen 
of the portable electronic device and having a password entry portion (JP Publication 08-251660, 
paragraph 0022). 

11. Claims 25-32 are apparatus claims corresponding to the method claims 1, 3-4 and 15. 
Claims 25-33 are rejected for the same reasons provided in the statement of rejections of claims 
1, 3-4 and 15 above. 

Claim Rejections - 35 USC § 102 
The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 351(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the English language. 

12. Claim 33 is rejected under 35 U.S.C. 102(b) as being anticipated by US Patent 6,504,480 
to Magnuson et al. (hereinafter "Magnuson"). 
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Magnuson discloses a method of protecting data within a portable electronic device 
comprising (Abstract): 

determining whether a predetermined time period has expired since the device has been 
synchronized with a second device (Fig. 3 and associated text, col. 5, line 55 through col. 6, line 
3); and 



14. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Taghi T. Arani whose telephone number is (571) 272-3787. The 
examiner can normally be reached on 8:00-5:30 Mon-Fri. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (571) 272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 86 6-2 1 7- 9 1 97"ffioll-free). 



erasing all applications and data stored on the device if the predetermined time 



period has expired (col. 6, lines 4-25). 



Conclusion 
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